The cryptographic operations for which you can use the CMK. Currently the only allowed
value is ENCRYPT_DECRYPT, which means you can use the CMK for the Encrypt and Decrypt operations.

Type: String

Valid Values: ENCRYPT_DECRYPT

Required: No

Origin

The source of the CMK's key material. When this value is AWS_KMS, AWS KMS
created the key material. When this value is EXTERNAL, the key material was
imported from your existing key management infrastructure or the CMK lacks key
material.

Type: String

Valid Values: AWS_KMS | EXTERNAL

Required: No

ValidTo

The time at which the imported key material expires. When the key material expires,
AWS KMS deletes the key material and the CMK becomes unusable. This value is present
only for
CMKs whose Origin is EXTERNAL and whose ExpirationModel
is KEY_MATERIAL_EXPIRES, otherwise this value is omitted.

Type: Timestamp

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs,
see the following: